$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/689b5c65-97a6-3849-9191-76fc91a3818d.roa File: 689b5c65-97a6-3849-9191-76fc91a3818d.roa (raw, json) Hash identifier: y8F3naJLKAQNwk4OSRBuwgZ96oB6B5XKxJlejpKdUX0= Subject key identifier: E8:22:DB:9F:8B:4F:EC:EF:88:B9:7B:BB:85:5D:A1:80:FD:58:66:02 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858499AF4842A35D8AE84D2FCA6C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/689b5c65-97a6-3849-9191-76fc91a3818d.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 3360 IP address blocks: 168.87.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:84:2a:35:d8:ae:84:d2:fc:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=691c50fc-807e-4847-9bff-b9a99f2b9e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:9b:69:c0:4c:f4:fa:f4:90:92:3f:32:29: fb:b3:17:b4:64:7f:2b:f4:e0:8d:76:fe:ab:13:4a: 40:32:17:d8:1f:4c:3c:fc:38:9a:0f:ff:74:51:31: 36:ae:f3:c9:b0:ba:14:92:2c:a3:3b:98:4b:bb:bf: 8d:04:89:9c:10:3a:36:43:2b:9f:df:fa:cb:c8:05: 7a:68:68:fe:9b:5b:7e:3f:ef:ef:e1:ad:a5:fb:ac: 86:f2:e6:b2:bf:25:7f:1a:4c:43:4e:db:3d:09:79: c5:75:50:10:16:1d:4b:79:48:ee:77:bf:c0:74:9f: 50:7b:68:44:28:5f:a5:11:86:5e:2f:f3:82:40:b3: de:74:ef:cb:e6:2a:d6:3a:83:c1:d0:48:25:c7:e4: 12:12:de:0f:31:82:55:09:46:db:15:ac:d2:e9:43: d0:88:07:45:54:14:0c:81:48:86:b8:b7:3b:1b:81: 61:34:eb:ff:3a:db:5b:a0:f6:3b:19:b0:fa:23:bf: 4b:14:f6:6a:7b:a7:88:e5:0e:99:4e:10:2a:69:b4: 55:a3:39:11:cf:24:d7:14:7f:2b:d7:9f:85:be:bf: ba:c1:86:e7:53:cc:a2:28:c1:8a:98:b0:60:f2:5c: 30:b5:a2:67:06:5e:c9:4a:b7:fe:e9:2c:7b:04:8a: 66:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:22:DB:9F:8B:4F:EC:EF:88:B9:7B:BB:85:5D:A1:80:FD:58:66:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/689b5c65-97a6-3849-9191-76fc91a3818d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:dd:4e:7a:a3:52:6d:a0:7c:0f:b9:67:f2:9b:b8:bc:fe:c7: 3d:c2:6c:4a:6b:ad:06:d2:aa:5d:25:48:f9:e6:25:4a:ea:f7: 0f:d0:fc:c8:b3:df:c0:1e:c0:2c:fc:de:75:cf:00:56:8c:4e: 11:d2:00:77:58:26:0b:fe:51:9a:10:43:b5:e0:88:a4:ce:b4: 36:56:01:2a:42:a4:e3:fc:94:f6:45:8f:ea:2a:42:de:0f:0d: cf:8c:30:d4:61:06:73:95:14:4a:7e:8f:cf:5f:2d:6c:55:66: 2f:03:f8:c3:78:b0:98:86:8b:fe:13:61:37:00:29:11:8f:d2: a5:2b:f3:9d:3f:e5:95:9e:a9:78:84:65:5f:14:25:92:b3:46: e1:bf:23:c5:f3:36:10:81:78:aa:e2:92:a4:5b:c5:56:b5:e1: b7:df:20:84:0f:2b:42:01:36:d9:d1:1d:69:04:50:8a:f5:4e: 35:a2:96:a3:14:57:a8:a9:75:9c:15:ad:73:23:d7:16:58:c1: 51:f4:0c:df:3e:2a:f1:4d:40:d2:76:94:09:38:60:7b:92:1f: eb:65:83:03:55:67:af:6f:95:68:c3:e4:e4:c1:ee:0f:76:a9: 30:b7:5f:76:a5:eb:5b:7d:e5:e0:1f:35:44:41:26:04:5d:a7: 21:a6:9d:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IQqNdiuhNL8psAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NjkxYzUwZmMtODA3ZS00ODQ3LTliZmYtYjlhOTlmMmI5ZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijubacBM9Pr0kJI/Min7sxe0ZH8r9OCNdv6r E0pAMhfYH0w8/DiaD/90UTE2rvPJsLoUkiyjO5hLu7+NBImcEDo2Qyuf3/rLyAV6 aGj+m1t+P+/v4a2l+6yG8uayvyV/GkxDTts9CXnFdVAQFh1LeUjud7/AdJ9Qe2hE KF+lEYZeL/OCQLPedO/L5irWOoPB0Eglx+QSEt4PMYJVCUbbFazS6UPQiAdFVBQM gUiGuLc7G4FhNOv/OttboPY7GbD6I79LFPZqe6eI5Q6ZThAqabRVozkRzyTXFH8r 15+Fvr+6wYbnU8yiKMGKmLBg8lwwtaJnBl7JSrf+6Sx7BIpmhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgi25+LT+zviLl7u4VdoYD9WGYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjg5YjVjNjUtOTdhNi0z ODQ5LTkxOTEtNzZmYzkxYTM4MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHdTnqjUm2gfA+5Z/KbuLz+xz3CbEprrQbSql0lSPnmJUrq9w/Q/Miz 38AewCz83nXPAFaMThHSAHdYJgv+UZoQQ7XgiKTOtDZWASpCpOP8lPZFj+oqQt4P Dc+MMNRhBnOVFEp+j89fLWxVZi8D+MN4sJiGi/4TYTcAKRGP0qUr850/5ZWeqXiE ZV8UJZKzRuG/I8XzNhCBeKrikqRbxVa14bffIIQPK0IBNtnRHWkEUIr1TjWilqMU V6ipdZwVrXMj1xZYwVH0DN8+KvFNQNJ2lAk4YHuSH+tlgwNVZ69vlWjD5OTB7g92 qTC3X3al61t95eAfNURBJgRdpyGmnRU= -----END CERTIFICATE-----Generated at Tue Apr 29 11:31:27 2025 by rpki-client